Skip to content
  • There are no suggestions because the search field is empty.

ApplicationEnhancer - Additional trusted domains do not appear when importing groupshat question is your article answering?

If AE  only shows one domain when you browse for users or groups, the issue may be related to domain registration rather than basic connectivity. In some environments, the AE server can resolve and reach another trusted domain, but that domain still will not appear in the import list until it has been registered correctly.

Symptoms

You may see the following behavior:

  • The additional domain is trusted.
  • DNS resolution appears to be working.
  • The AE server can ping the domain controller by name.
  • Only one domain appears when browsing to import users or groups. 

 

Cause

For multi-domain environments, each domain may need to be registered separately through the Component Registration Wizard. If an additional trusted domain has not been registered with the appropriate service account, it may not appear as an available source during group or user import. 

 

Resolution

Register the administrator or service account for each additional trusted domain in the Component Registration Wizard

 

Step-by-step procedure

Step 1: Open the Component Registration Wizard

Open the Component Registration Wizard in your AE 22.2 environment.

Step 2: Review the current domain registration

Check which domain is currently registered. If only the primary domain has been registered, additional trusted domains may not appear during import. 

Step 3: Register the additional domain

Register the administrator or service account for the additional trusted domain you want to use. If you need to browse more than one trusted domain, repeat this process for each domain that should be available for import. 

Step 4: Verify domain trust

Confirm that the required trust relationship exists between the domains. The support guidance for this case specifically called out verifying two-way trust between the domains.

Step 5: Verify DNS resolution

From the AE server, confirm that the additional domain controllers can be resolved and reached successfully. 

Step 6: Confirm account permissions

Verify that the service account or impersonation account used during registration has the necessary rights in each additional domain being registered. 

Step 7: Return to the import screen

After registration is complete, return to the user or group import screen and browse again to confirm the additional trusted domain now appears.